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. (1) Real Party in Intere$t 

The real party in interest is Hewlett-Packard Development Compaay, L,P. 

(2) JRclated Appeals and Interferences 

The Appellant Is unaware of any appeals or interferences related to ^ case, 

(3) Status of Claims 

Claims 1 -30 are pending in the present application of \i^4uch claims U 1 6, 27 and 28 are 
independent. Claims 1 6-26 arc withdrawn. Claims 1-15 and 27-30 are all rejected and arc all 
hereby appealed. 

(4) Status of Amendments 

An amendment after final was filed on September 1 5» 2008 subsequent to the Final 
Office Action dated June 1 3, 2008. An advisory action was mailed on October 1 , 2008 
indicating that the request for rcconsldcradon does not place the application in condition for 
allowance. It appears the Examiner believes the amendment after final was a request for 
rcconsidemcion even though the amendment after final included amendments to claims 27, 28, 
and 30. The advisory action Mlcd to indicate whcdicr the amendments filed in the amendment 
after final filed were entered or not entered. It is assumed the amendments were not entered 
because the Examiner indicated the request for reconsideration docs not place the application in 
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condition for allowance. Accordingly, the claims presented for appeal are the claims? in the 
response filed February 21, 2008. 

(5) Summary of Claimed Subject Matter 

Support for the following claims is at least provided in the cited sections of the application. 
1 • A removable information storage device suitable for use with a host, comprising: 
a non-volatile memory configured to store a master encryption key; and See page 4, line 
6-pagc 6, line 18 and figure 1. 

a non-volatile magnetic memory configured to store encryption keys which have been 
encrypted using the master enciyption key and to store data which has been encrypted using the 
encryption k^s. See page 4, Une 6-page 6, line 1 8 and figure 1 . 

27. (Original) A method of encrypting encryption keys using a master encryption key in 
an information storage device, comprising: 

providing the encryption keys to the information storage device; Sec page 21, lines 1-28, 
and figure 12, 

reading a master encryption key from a non-volalile memory; See page 21 , lines 1 -28, 
and figure 12* 

encrypting each one of the encryption keys using the master encryption key; and See 
page 21, lines 1-28, and figure 12. 

writing the encrypted encryption keys to a random access memory. See page 21 » lines 1 - 
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28, and figure 12* 

28. (Origirial) A mediod of decrypting encryption keys in an information storage device, 
comprising: 

reading the encrypted encryption keys from a magnetic random access memory; See 
page 21, line 29-page 22, line 30, and (igure 13* 

reading a master encryption key from a first non-volalilc mcmoiy; and Sec page 21, line 
29-pagc 22, line 30, and figiirc 13, 

decrypting each one of the encryption keys using the master encryption key. See page 21, 
line 29-page 22, line 30, and figure 13. 

30, (Original) The method of claim 28, comprising: 

encrypting data using the encryption keys; and Sec page 21, lines 1-28, and figure 12. 
writing fbe encrypted data to the magnetic random access memory. See page 21, lines 1- 
28, and figure 12* 



(6) Grounds of Rejection to be Reviewed on Appeal 

A. Claim 27 is rejected under 35 U,S,C. §1 02(e) as being unpatentable over Mihm et 
al* (US 2003/0236983 Al), lefenred to as Mihm. 

5 
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B. ClaiTTis 1 -IS and 28-30 are rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Mihm, and further in view of Fujita (US 6,947,3 18 B1 ). 
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(7) Arguments 

A, The rejection of claim 27 under 35 U>S,C> SlOZfe) ns beingjiPPatentablc over Mihm 

should be reversed for failure to teach_ail_thc claimed fcaturcig. 

The test for determining if a icfcicncc anticipates a claim, for purposes ofa rejection 

under 35 U,S,C, § 102, is whether the reference discloses all the elements of the claimed 

combination, or the mechanical equivalents thereof funcdomng in substantially the same way to 

produce substantially the same results. As noted by the Court of Appeals for the Federal Circuit 

Inlindemann Maschimnfabrick GmhHv. American Hoist and Demek Co,, 221 USPQ 481, 485 

(Fed. Cin 1984), in evaluating the sufficiency of an anticipation rejection under 35 U.S.C. § 102, 

the Court stated; 

Anticipation requires the presence in a single prior art reference 
disclosure of each and every element of tlie claimed invention, 
arTEinged as in the cIbsxsl 

Therefore, if the cited reference does not disclose each and every clement of the claimed 

invention, then the cited reference fails to anticipate the claimed invention and, thus, the claimed 

invention is distinguishable over the cited reference. 

Claim 27 recites, 

encrypting each one of the encrypdon keys using the master encryption key; and 
witing the encrypted encryption keys to a random access memory. 

Mihm fails to teach encrypting each one of the encryption keys provided to the 

information storage device using the master encryption key. On page 3 of the Final OfBcc 

Action, the Examiner asserts that paragraph 34 of Mihm discloses the £UID 162, which is stored 

7 
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in the rewriteable nonvolatile memory 160, is formed by encrypting the UTD 1 52 with a master 
encryption key. ThuSy the Examiner is asserting the master key of MtTim is the claimed master 
encryption key for encrypting keys provided to the information storage device. Below, a 
discussion of the master key and authentication process of Milim is provided, and then an 
explanation follows of why the master key of Mihm is not used to encrypt keys based on the 
disclosure of Mihm« 

Paragmphs 47 and 59 of Mihm disclose that a master key 612 is only stored In a single 
location and controlled by the service provider, and never requiring tmnsmitting the master key* 
Thus, the master key is not stored or transmitted to the device 100. Mihm also discloses, at ihe 
service provider, the master key is used to encrypt the UID 152 to create the encrypted unique ID 
CEUID614). 

Paragraph 47 further discloses the EUID 614 is sent firom the service provider to ihc 
device 100 as a combination 610 of the £UiO 614 and the password 41 0. Paragraph 48 ofMihm 
discloses the device 1 00 receives the combinadon 61 0, and decrypts the password in the 
combination 610 using the third key 312. The decrypted password is compared to a password . 
previously generated on the device 1 00. If the passwords match, the EUID 61 4 is stored in 
NVM in the device 1 00» This process is further shown in figures 6 and 7 of Minh, 

Paragraph 48 of Milim further discloses that after storing the EUID in NVM, the device 
100 is ready to receive encrypted downloads fiom the service provider or perform oilier secure 
communications* This is further elaborated on in paragraph 47, which discloses the service 
provider receives tlic EUID from the device 100 when service is requested, and the service 
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provider decrypts the BUID using tlic master key to recover the UID for authentication purposes 
when the service is requested ftom the device 100. ITie authentication and secure 
communication is further described in paragraph 58 and shown in figures 15, 16, 20 and 21 • The 
UTD recovered from the EUTD received from the device 1 00 at Ihe service provider is used to 
generate the transport key. Also, at the device 100, the UIO previously stored in the ROM is 
used to genemte the transport key. The transport key is used for the secure communication 
between the device/subscriber and the service provider* Sec paragraph 58 of MiniL 

In summary, the disclosure of Minh described above discloses the master key is used to 
encrypt the UID at the service provider, and the encrypted UID (EUID) is sent to the device for 
storage. The EUID is later used for secure communications between the device and the service 
provider as follows: the device sends the EUID back to the service provider; the service provider 
decrypts the EUID using the master key to recover the UID and genemte the transport key; and 
the device, which previously stored the UK), also uses the UID to generate the transport key for 
secure communications with the service provider. Thus, the master key of Minh is not used to 
encrypt each one of keys provided lo information stomge, and then write the encrypted keys to 
RAM. Instead, the master key is only used to encrypt a UK), llic UID Is a unique identifier of a 
device, and not a key. Thus, Mihm fails to teach encrypting each one of multiple encryption 
keys using a master enciyption key. 

The secure communications of Minh uses a transport key generated by the device and the 
service provider. However, Minh fails to teach the transport key is used to encrypt keys. 
Instead, panigmph 58 of Minh discloses the transport key is used to encrypt software SWRJDL 

9 

PAGE11/25*RCVDAT 1/13120891:10:48 PM [Eastern Standard 



JflN-]3-E009(TUE) 13:18 MRNNflVfl & KflNG 



(FflX)T038655150 



P. oiE/oes 



PATENT Atty Docket No.: 10013891-1 

App, Scr.No.: 10/689,157 

for securely tronsniitting the software between the service provider and tbe device. Furtfaermore, 
there would be no need to encrypt keys using the transport key, because the transport key already 
provides the secure communication between the service provider and the device. Thus, there is 
no need to send other keys for secure conimuntcations. 

For at least these reasons, the rejection of claim 27 should be reversed 

B, The rejection of claims 1^15 und 28'-30_undcr_35_Ijf,S,CjSl 03(a)_a5_b_ejng 

unpatentable over Mihm in view of Fujita should be reversed for failure to teach or Kuggcst 

all the claimed features. 

The test for determining if a claim is rendered obvious by one or more references for 

putposcs of a rejection under 35 U.S.C^ § 103 is set forth in KSR Jnterrtaiioml Co. v. Tekflex 

/rtc, 550 aS,_, 82 USPQ2d 1385 (2007): 

"Under §103, the scope and content of the prior art arc to be determined; 
diiTerences between the prior art and the claims at issue ore to be ascertained; and 
the level of ordinary skill in the pcrdnent art resolved. Against this background 
the obviousness or nonobviousness of the subject matter is determined. Such 
secondary considerations as commercial success, long felt but unsolved needs, 
failure of others, etc., might be utilized to give light to the circumstances 
surrounding the origin of the subject maUer sought to be patented." Quoting 
Grah£im v. John Deere Co, of Kansas City. 383 U.S. 1 C1966)- 

According to the Examination Guidelines for Determining Obviousness Under 35 U,S.C- 
103 m view of /CSA International Co. v. Tekflex Inc.^ Fedeml Register, Vol, 72, No. 1 95, 57526, 
57529 (October 1 0, 2007), once the Graham factual inquiries arc resolved, there must be a 

10 
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delerminatiOTi oFwhether the claimed invention would have been obvious to one ofordinary skill 

in the art based on any one of die following proper rationales: 

(A) Combining prior art clccponts according to known methods to yield 
predictable results; (B) Simple substitution of one known element for anodier to 
obtain predictable results; (C) Use of known technique to improve similar devices 
(methods, or products) in the same way; (D) Applying a known technique to a 
known device (mediod, or product) ready for improvanent to yield predictable 
results; (E) "Obvious to try" — choosing fix)m a finite number of identified, 
predictable solutions, with a reasonable expectation of success; (F) Known work 
in one field of endeavor may prompt variations oFil for use in either the same 
field or a different one based on design incentives or other market forces if the 
variations would Imve been predictable to one of ordinary skill in the art; (G) 
Some teaching, suggestion, or motivation in the prior art that would have led one 
of ondinary skill to modily Uie prior art reference or to combine prior art reference 
teachings to arrive at the claimed invention. KSH Internationat Co. v. Tekflex 
Inc., 550 U.S-_, 82 USPQ2d 1385 (2007). 

Furthermore, as set forth in KSR International Co. v. Teleflex Ina^ quoting firom In re 
Ktihn^ 441 F. 3d 977, 988 (CA Fed* 2006), **[R]ejeciions on obviousness grounds cannot be 
sustained by mere conclusory statements; instead, there must be some ardculatcd reasonings with 
some rational underpinning to support the legal conclusion of obviousness*'^ 

Furthermore, as set forth in MPEP 2143.03, to ascertain the differences between the prior 
art and the claims at issue, ''*[a]ll claim limitations must be considered^' because ^^all words in a 
claim must be considered in judging the patentability of that claim against the prior art,'" In re 
Wilson, 424 F.2d 1 382, 1 385. 

if the above-identified criteria and rationales are not met, then the cited references fall to 
render obvious the claimed invention and, thus, the claimed invention is distinguishable over the 
cited references. 
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Independent claim 1 recites^ '^A removable storage device suitable for use with a host 
comprising: a non-volatile memoiy configured to store a master encryption key . .'^ 

The Final Office Action, on page S, asserts these features arc disclosed in paragraph 34 of 
Nfihm, which discloses storing the EUXD 1 62 in NV memory 1 60 in the device 1 00, However, 
as described above» paitigmph 59 oFMihm discloses that only the service provider controls Uie 
master key, and that the master key is never transmitted. Thus, the device 100 of Mihm, 
including the RAM 140, ROM 150 and NV memory 160, do not store the master key. Also, 
Mihm &ils to teach or suggest the service provider includes a removable storage device 
including a non-volatile memory storing a master key. Furthermore, it would not have been 
obvious to store the master key of Milim in a removable storage device at the service provider, 
because it would allow tlic master key to be easily removed and copied, wliich is contrary to the 
security requirements disclosed in paragraph 59 of Mihm, 

Claim 1 also recites, "a non-volatile magnetic memory configured to store encryption 
keys which have been encrypted using the master encryption key and to store data which has 
been cnciyptcd using the encryption kcys/^ For the reasons described with respect to claim 27, 
Mihm feils to teach or suggest encryption keys which have been encrypted using a master 
encryption key, Fujita was cited to teach the claimed magnetic memory. Fujita does not remedy 
the aforementioned deficient teachings of Mihm- 

Tndependent claim 28 recites, "decrypting each one of the encryption keys using the 
master encryption key." Mihm in view of Fujita fails to teach or suggest encrypting multiple 
keys using a master key for the reasons stated above. Mihm in view of Fujita also &il to teach or 
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sugge^ encrypting multiple keys using a master key, since keys are not encoded with a master 
key in Mihrn in view of Fujtta, 

Dependent claim 30 recites, ^encrypting data using the encryption kcys.^^ As described 
above» Mihm discloses enciypting software for secure transmission asing a single tmnsport key. 
However, Mihm in view of Fujtta fiiils to teach or suggest encrypting data using multiple 
encryption keys. Also, Mihm in view of Fi^*tta fails to teach or suggest encrypting data using 
multiple encryption keys, wherein the multiple encryption keys are encrypted using a master key. 

For at least these reasons the rejection of claims 1«*1 5 and 28O0 should be reversed. 
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(8) Conclusion 

For at least the reasons given above, the rqection of claims 1 -1 5 and 27-30 described 
above should be rcvccscd and these daims allowed. 

Please grant any required extensions of time and charge any fees due in connection wth 
this Appeal Brief to deposit account no. 08-2025. 



Respectfully submitted. 



Dated: Januaiy 13, 2009 



By 



(y^k^i^ /A 

Asnok K. Mannava 
Registration No.: 45,301 



MANNAVA & JCANG, P.C 
11240 Waples Mill Road 
Suite 300 

Fairfax, VA 22030 
(703) 652-3822 
(703)865-5150 (facsimile) 
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(9) Cluim ApppndiT^ 

1, (Origuial) A removable iulbrmation storage device suitable for use with a host, 
comprising: 

a non-volatile memory configured to store a master encryption key; and 
anon-volatile magnetic memory con figured to store encrypdon keys which have been 

encrypted using the master encryption key and to store data which has been encrypted using the 

encryption keys. 

2, (Original) TIte information stomgc device of claim 1, further comprisiDg an encryption 
and decryption engine configured to encrypt and decrypt the encryption keys usmg the master 
encrypdon key and to encrypt and decrypt the data using one or more of the encryption keys. 

3, (Original) The information storage device of claim 1, wherein the first non-volatile 
memory is a magnetic memory, 

4, (Original) The information storage device of claim I, wherein the first non-volatile 
memory is a read-only memory which includes fuse elements. 

5, (Original) The information storage device of claim 1, wherein the first non-volatile 
memory is a nitrided read-only memory. 
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6. (Original) The information storage device of daim 1, wherein the first non-volatile 
memory is an erasable programmable read-only memory. 

7. (Original) Tlic information storage device of claim 1, wherein the first non-volaiile 
memory is an electronically erasable programmable read-only memory. 

8. (Original) The information storage device of claim 1, wherein the first non-volatile 
memory is a flash erasable programmable read-only memory, 

9. (Original) The information storage device of claim 1, wherein the first non-volatUc 
mcmoiy is a one time programmable read-only memory* 

10. (Original) The information storage device of claim 1» wherein the non-volatile 
magnetic memory is a magnetic random access memory. 

1 1 « (Original) The information storage device of claim 1, wherein the second non-volatile 
memory is partitioned into first and second arcas^, and wherein the encrypted encryption keys arc 
stored in the first areas and the encrypted data is stored in the second areas. 

12. (Original) The information storage device of claim 1, wherein the second non-volatile 
memory is partitioned into first and second areas, and wherein the encrypted encryption keys and 
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the encrypted data ore stored m the first areas. 

13. (Original) The infonnatioa storage device of claim 1 , ^vherein the second non^^volatile 
memory is partitioned into first and second areas, and wherein die encrypted encryption keys arc 
stored in Uie first areas and the enciypted data is stored in the first and second areas. 

14* (Original) The infonnatlon storage device of claim 13, wherein the Iirst areas arc 
located at one or more predetermined address locations within the second non-volatile memory. 

15* (Original) Tlie information storage device of claim 1 3, wherein the fiist areas are 
located at one or more mndom address locations within the second non-volatile memoty. 

16. (Withdrawn) A portable memory card, comprising: 

a non**volatile memory stomge device configured to store one or more encrypted 
encryption keys and encrypted data; and 

a caM controller system coupled to tlie memory stomge device configured to store and 
retrieve the encrypted encryption keys and the encrypted data j&om the memory storage dewe, 
wherein the encryption keys arc encrypted and decrypted using a master encryption key and the 
data is encrypted and decrypted usmg the encryption keys* 

17. (Withdrawn) The portable memory card of claim 16, wherein the non-volatile 
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TTicmory is a magnetic memory. 

18* (Withdrawn) The portable memory card of claim 1 6, wherein tlie non-volatilc 
mcmoiy is aa atomic resolution storage memory. 

19. (Withdrawn) The portable memory card of claim 16, wherein the card controller 
system includes a non-volatile master key memory configured to store the master encryption 
key. 

20. (Withdrawn) The portable memory card of claim 16, wherein the card controller 
system includes an encryption and decryption engine configured to store one or more encryption 
algorithms and use the encryption algorithms to encrypt and decrypt the encryption keys using 
the master encryption key and encrypt and decrypt the data using the encryption keys. 

21. (Withdrawn) The portable memory card of claim 16, wherein the memory storage 
device is partitioned into first and second areas, and wherein the encrypted encryption keys are 
stored in the first areas and the encrypted data is stored in the second areas, 

22. (Withdrawn) The portable memory card of claim 16, wherein the memory storage 
device is partitioned into first and second areas, and wherein the encrypted encryption keys and 
the encrypted data are stored in tiie iirst areas. 
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23, (Withdrawn) The portable memory card ofclaim 1 6, wherein the memory storage 
device is pmtidoned into first and second areas, and wherein the encrypted eoccyptioii keys are 
stored in the first areas and the encrypted data is stored in the first and second areas« 

24. (Withdrawn) A memory card, comprising: 

anon-volaiilc master key memory configured to store a master encryption key; 

an enciyption and decryption engine configured to implement one or more symmctdcal 
encryption key algorithms based on the master encryption key and encryption keys; 

a memory stomgc device comprising an atomic resolution storage device including a 
field emitter, a media and a mlcromover, the atomic resolution storage device configured to store 
the encryption keys after the encryption keys are encrypted using the master encryption key and 
to store data after the data is encrypted using the encryption keys; 

a host interface configured to provide a communication interface to a host; 

a memory interface configured to provide a communication interface to the memoty 
storage device; 

a data path manager conffgured to manage communication of the data and the encrypted 
data between the host and the memory stomge device; and 

a controller processor configured to control the encryption and decryption of the 
encryption keys using the master encryption key and the encryption and decryption of the data 
using the encryption keys. 
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25. (Withdrawn) An information storage device, comprising: 

a non-volatUc memory storage device con:Ggured to store one or more encrypted 
encryption keys and encrypted data; 

and controller means configured to store and retrieve the encrypted encryption keys and 
the encrypted data Irom ihe memory storage device and to encrypt and decrypt the encryption 
keys using a master encryption key and to encrypt and decrypt the data using the encryption 
keys* 

26, (Withdmwn) Tlie information storage device of claim 25, wherein the controller 
means includes a non-volatilc master key memory configured to store the master encryption key. 

27* (Original) A method of encrypting encryption keys using a master encryption Icey in 
an information stomge device, comprising: 

providing the encryption keys to the information storage device; 

reading a master encryption key &om a non-volatile memorj^ 

encrypting each one of the encryption keys using the master encryption key; and 

writing the encrypted encryption keys to a mndom access memory. 

28. (Original) A method of decrypting encryption keys in an information storage device, 
comprising: 
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reading the encrypted encryption keys fix)m a magnetic random access memory; 
reading a master encryption key from a first non-volatile memory; and 
decrypting each one of the encryption keys usmg the master encryption key. 

29. (Original) The method of claim 28, comprising: 

reading encrypted data &om the magnetic mndom access memory; and 
decrypting the encrypted data using the encryption keys. 

30. (Original) The method of claim 28, comprising: 
encrypting data using the encryption keys; and 

writing the encrypted data to the magnetic mndom access memory* 
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(10) Evidence Appendix 
None. 
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(11) Related Proceedings Appendix 

None. 
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